PCX 



WCmU) PfmiFfTUAL PROPERTY ORGANIZATION 
Inscnuxkml Borttu 




INTCRNATIONAL APPUCATION PUBUSHED UNDER TOE PATENT COOPERATION TOEATY (PCT) 



(51) ImeraatkMial Pstcm Cbttriflatloii ^ : 
G0dF17/S0 



Al 



ai) Intcmtkmal Publkatton Number: 
(43) iDteraatioin] PubtkatUm Date: 



WO 96/13013 

2 May 1996 (02J05.96) 



(21) Imernatioiial ApidkBtfam Number: PCmJS9S/l3723 

(22) Intenttloiia] FOIng Date: 24 October 1995 (24.ia9S) 



OO) PriiBity Date: 
08/328J33 



24 October 1994 (24.10.94) 



US 



ai) AppUcaol: OPEN MARKET. INC [USAJS]; 245 Fast Stzeet. 
Cambridge. MA 02142 (US). 

(72) Inventors: PAY NE, An drew, C; 5 LewU Street. Uncota, MA 
01773 (US). STEWART, Lawrence, C; One Artwrwood 
Drive, Burlington, MA 01803 (US). MACXIE, David. 8 
Sbepard Street #2, Cambridge. MA 02138 (US). 

(74) Agent: WALPERT, Gary, Aa Fish & Rtchaxdson PX.. 225 
Franklin Street, Boston. MA 02110 (US). 



(81) Desi^utcd States: iP. European patent (AT. BE, CH. DE DK. 
ES. FR, GB. GR. IE, IT. LU. MC. NL. FT. SE). 



PublUied 

With ituemaionai search report 



(54) Title: NETWORK SALES SYSTEM 

hffCT cnmpuirr 17 



p>ymfni rrnrnniitrrJA 




(57) Abstract 

Anecwoxk-based tales system includes at least one buyer computer (12) for opention by a user desiring to buy a product, at least 
one maxhant compmer (14), and at least one payment c omputer (16). Ibe buyer computer is pregramm ed to receive a user request for 
purchaiing a product Tbe payment computer is progrumned to recdve the payinem message* from the buyer computer, to cause an access 
message to be created that comprises ttse product identifier and an access mem^. autbenticator based on a cryptographic key. and to cause 
the access message to be sent to the mercham computer. The mer^umt co mpuiei is programmed to receive the access message, to verily 
the access message authemicatar to ensure that access message amhrnricttor was created using te cryptographic key, and to send the 
product to the user desiring rbt product 
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METWDRlg SATMR ffYiTTm 

Backorround at iaa Tit^T^^jftTl 
This invention relates to user-interactive network 
5 sales systems for inplenenting an open marketplace for 
goods or services over computer networks such as the 
Internet. 

U.S. Patent Application Serial No. 08/168,519, 
filed December 16, 1993 by David K. Gifford and entitled 

10 -Digital Active Advertising," the entire disclosure of 
which is hereby incorporated herein in its entirety by 
reference, describes a network sales system that includes 
a plurality of buyer computers, a plurality of merchant 
computers, and a payment computer. A user at a buyer 

15 computer asks to have advertisements displayed, and the 
buyer computer requests advertisements from a merchant 
computer, which sends the advertisements to the buyer 
computer. The user then requests purchase of an 
advertised product, and the buyer computer sends a 

20 purchase message to the merchant computer. The merchant 
computer constructs a payment order that it sends to the 
payment computer, which authorizes the purchase and sends 
an authorisation message to the merchant computer. When 
the merchant computer receives the authorization message 

25 it sends the product to the buyer computer. 

The above-mentioned patent application also 
describes an alternative implementation of the network 
sales system in which, when the user requests purchase of 
an advertised product, the buyer computer sends a payment 

30 order directly to the payment computer, which sends an 
authorization message back to the buyer computer that 
includes an unforgeable certificate that the payment 
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order is valid. The buyer coi^uter then constructs a 
purchase message that includes the lanf orgeable 
certificate and sends it to the aerchant computer. When 
the merchant coa^uter receives the purchase request it 
5 sends the product to the buyer computer, based upon the 
pre-authorised payment order. 

In one aspect, the invention provides a network- 
based sales system that includes at least one buyer 

10 computer for operation by a user desiring to buy a 

product, at least one merchant computer, and at least one 
payment co^uter. The buyer computer, the merchemt 
computer, and the payment coaster are interconnected by 
a computer network. The buyer computer is programmed to 

15 receive a user request for purchasing a product, and to 
cause a payment message to be sent to the payment 
conputer that comprises a product identifier identifying 
the product. The payment computer is programmed to 
receive the payment message, to cause an access message 

20 to be created that comprises the product identifier and 
an access message authenticator based on a cryptographic 
key, and to cause the access message to be sent to the 
merchant computer. The merchant computer is programmed 
to receive the access message, to verify the access 

25 message authenticator to ensure that the access message 
authenticator was created using the cryptographic key, 
and to cause the product to be eent to the user desiring 
to buy the product* 

raie invention provides a simple design 

30 architecture for the network sales system that allows the 
merchant computer to respond to payment orders from the 
buyer computer without the merchant computer having to 
communicate directly with the payment computer to ensure 
that the user is authorized to pxzrchase the product and 

35 without the merchant computer having to store information 
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In a databBBs ragarding which buyers are authorized to 
purchase which products. Rather i when the serchant 
counter receives an access message from the buyer 
computer identifying a product to be purchased, the 
5 merchant computer need only dheck the access message to 
ensure that it was created by the payment computer 
(thereby establishing for the merchant computer that the 
buyer is authorized to purchase the product) , and then 
the merchant computer can cause the product to be sent to 

10 the buyer computer who has been authorized to purchase 
the product. 

In another aspect, the invention features a 
network^based sales system that includes at least one 
buyer computer for operation by a user desiring to buy 

15 products, at least one shopping cart computer, and a 
shopping cart database connected to the shopping cart 
computer. The buyer computer and the shopping cart 
coB^uter are interconnected by a computer network. The 
buyer computer is programmed to receive a plurality of 

20 requests from a user to add a plurality of respective 
products to a shopping cart in the shopping cart 
database, and, in respoiise to the requests to add the 
products, to send a plurality of respective shopping cart 
messages to the shopping cart computer each of which 

25 includes a product identifier identifying one of the 
plurality of products. The shopping cart computer is 
programmed to receive the plurality of shopping cart 
messages, to modify the shopping cart in the shopping 
cart database to reflect the plurality of requests to add 

30 the plurality of products to the shopping cart, and to 
cause a payment message associated with the shopping cart 
to be created. The buyer computer is programmed to 
receive a request from the user to purchase the plurality 
of products added to the shopping cart and to cause the 

35 payment message to be activated to initiate a payment 
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transaction for the plurality of products addad to the 
shopping cart. 

In another aspect, the invention features a 
netvorX-based link message system that includes at least 
5 one client computer for operation by a client user and at 
least one server computer for operation by a server user. 
The client computer and the server computer are 
interconnected by a computer network. The client 
computer is programmed to send an initial link message to 

10 the server coiq>uter. The server computer is programmed 
to receive the initial link message from the client 
computer and to create, based on information contained in 
the initial link message, a session link message that 
encodes a state of interaction between the client 

15 computer and the server computer. The session link 

message includes a session link authenticator, computed 
by a cryptographic function of the session link contents, 
for authenticating the session link message. The server 
computer is programmed to cause the session link message 

20 to be sent to the client computer. Wie client computer 
is prograiamed to cause the session link message to be 
sent to a coDputer in the network that is programmed to 
authenticate the session link message by examining the 
session link authenticator and that is programmed to 

25 respond to the session link message based on the state of 
the interaction between the client computer and the 
server computer. 

In another aspect, the invention features a 
network-based sales system that includes a merchant 

30 database having a plurality of digital advertisements and 
a plurality of respective product fulfillment items, at 
least one creation conqsuter for creating the merchant 
database, and at least one merchant computer for causing 
the digital advertisements to be transmitted to a user 

35 and for causing advertised products to be transmitted to 
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the user. The creation computer and the nerchant 
computer are interconnected by a computer network. The 
creation computer Is programmed to create the merchant 
database, and to transmit the digital advertisements and 
5 the product fulfillment items to the merchant computer. 
The merchant coxaputer i« programmed to receive the 
digital advertisements and product fulfillaent items, to 
receive a request for a digital advertisement from a 
user, to cause the digital advertisement to be sent to 
10 the user, to receive from the user an access message 
identifying an advertised product, and to cause the 
product to be sent to the user in accordance with a 
product fulfillment item corresponding to the product. 
In another aspect, the invention features a 
15 hypertext statement system that includes a client 

computer for operation by a client user and one or more 
server computers for operation by a server user. The 
client computer and the server computers are 
interconnected by a computer network. At least one of 
20 the server computers is progranmed to record purchase 
transaction records in a database. Each of the purchase 
transaction records includes a product description. The 
server computer is programmed to transmit a statement 
document that Includes the purchase transaction records 
25 to the client computer. The client computer is 
programmed to display the product descriptions, to 
receive a request from the client user to display a 
product corresponding to a product description displayed 
by the client computer, and to cause a product hypertext 
30 link derived from a purchase transaction record to be 
activated. At least one of the server computers is 
programmed to respond to activation of the product 
hypertext link by causing the product to be sent to the 
client computer. 
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In another aspect, the invention features a 
network payMsnt aystea that includes at least one buyer 
coaputer for operation by a user desiring to buy a 
product and at least one payment cooputer for processing 
5 payaent aessages frost the buyer co mp u ter. The buyer 

computer and the payment computer are interconnected by a 
computer netvork. ThB buyer coaputer is programmed to 
cause a payment message to be sent to the payment 
coB^ter. The payment message includes a product 
10 identifier identifying the product that the user desires 
to buy. The payment coaputer is programmed to receive 
the payment message, to cause an access message to be 
created to enable the user to access the product, and to 
record a purchase tremsaction record in the settlement 
15 database, The buyer coaputer is programmed to cause a 
request for purchase transaction records to be sent to 
the payment computer. The payment computer is programmed 
to receive the request for purchase transaction records 
and to cause a document derived from the purchase 
20 transaction records to be sent to the buyer computer. 

Brief Description of i^he Dravinafl 
Pig. 1 is a block diagram of a network sales 
system in accordance with the present invention. 

Pig. 2 (2-A through 2-1) is a flowchart diagram 
25 illustrating the operation of a purchase transaction in 
the network sales system of Pig. i. 

Pig. 3 (3-A through 3-B) is a flowchart diagram 
illustrating the use of a shopping cart for the purchase 
of products in connection with the network sales system 
30 of Pig. 1. 

Pig. 4 (4-A through 4-C) is a flowchart diagram 
illustrating the operation of a smart statement in the 
network seaes system of Pig. l. 



WO96/130U 



PCT/US9Sa3723 



- 7 - 



10 



Pig. 5 is a scraen snapshot of an advertising 
docuaent that the nerchant computer sends to the buyer 

campateT in Fig. 2. 

Fig. 6 is a screen snapshot of a confirmation 
document that the payment computer sends to the buyer 

computer in Fig* 2. 

Fig. 7 is a screen snapshot of a new account 
document that the payment computer sends to the buyer 

cosqputer in Fig. 2. 

Fig. 8 is a screen snapshot of an account name 
prompt that the buyer computer creates in Fig. 2. 

Fig. 9 is a screen snapshot of a document that the 
payment computer sends to the buyer computer in Fig. 2 
and that provides an option either to repurchase or to 
15 use a previously ptirchased access. 

Fig. 10 is a screen snapshot of a fulfillment 
document that the merchant computer sends to the buyer 
computer in Fig. 2. 

Fig. 11 is a screen snapshot of a smart statement 
20 document that the payment computer sends to the buyer 
computer in Fig. 4. 

Figs. 12 and 13 are screen snapshots of a 
transaction detail document that the payment computer 
sends to the buyer computer in Fig. 4. 
25 Pig. 14 is a screen snapshot of a customer service 

form that the payment computer sends to the buyer 
computer in Fig. 4. 

With reference to Fig. l, a network sales system 
30 in accordance with the present invention includes a buyer 
computer 12 operated by a user desiring to buy a product, 
a merchant computer 14, which may be operated by a 
merchant willing to sell products to the buyer or by a 
manager of the network sales system, a payment computer 
35 16 typically operated by a manager of the network sales 
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system, and a creation ccnoputer 20 typically operated by 
the merchant. The buyer, merchant, payment, and creation 
coaqiuters are all inter--connected by a compxiter network 
10 such as the Internet. 
5 creation computer 20 is programmed to build a 

"store" of products for the merchant, A printout of a 
computer program for use in creating such a "store** in 
accordance with the present invention is provided as 
Appendix P. 

10 The products advertised by merchant computer 14 

exan^le, newspaper or neraletter articles 
available for purchase by buyers. Creation computer 20 
creates a digital advertisement database 18 that stores 
advertising documents (which may for example be in the 
15 form of summaries of newspaper or newsletter articles, 
accompanied by prices) and product fulfillment items 
(which may be the products themselves if the products can 
be transmitted over the network, or which may be hard 
goods identifiers if the products are hard goods, i.e., 
20 durable products as opposed to information products) . 
Creation computer 20 transmits contents of the 
advertising document database 18 to merchant computer 14 
to enable the merchant computer to cause advertisements 
and products to be sent to buyers. Merchant computer 14 
25 maintains advertising documents locally in advertising 
document database 15. In an alternative embodiment, the 
creation computer does not have a local digital 
advertisement database, but instead updates a remote 
advertising document database on a merchant conputer. 
30 These updates can be accomplished using BIKL forms or 
other remote database technologies as is understood by 
practitioners of the art. 

Payment computer 16 has access to a settlement 
database 22 in which payment computer 16 can record 
35 details of purchase transactions. The products may be 
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organized into various "domains" of products, and payment 
computer 16 can access settlement database 22 to record 
and retrieve records of purchases of products falling 
within the various domains. Payment computer 16 also has 
5 access to a shopping cart database 21 in vhich a 
"shopping cart" of products that a user wishes to 
purchase can be maintained as the user shops prior to 
actual purchase of the contents of the shopping cart* 

With reference to Pig. 2, a purchase transaction 

10 begins when a user at buyer computer 12 requests 
advertisements (step 24) and buyer computer 12 
accordingly sends an advertising document URL (universal 
resource locator) to merchant computer 14 (step 26) . The 
merchant computer fetches an advertising document from 

15 the advertising document database (step 28) and sends it 
to the buyer computer (step 30) . An example of an 
advertising document is shown in Pig. 5. Details of URLs 
and how they are used are found in the microfiche 
Appendix 6. 

20 The user browses through the advertising document 

and eventually requests a product (step 32). This 
results in the buyer computer sending payment URL A to 
the payment computer (step 34) . Payment URL A includes a 
product identifier that represents the product the user 

25 wishes to buy, a domain identifier that represents a 

domain of products to which the desired product belongs, 
a payiaent amount that represents the price of the 
product, a merchant computer identifier that represents 
merchant computer 14, a merchant account identifier that 

30 represents the particular merchant account to be credited 
with the payment amount, a duration time that represents 
the length of time for which access to the product is to 
be granted to the user after completion of the purchase 
transaction, an expiration time that represents a 

35 deadline beyond which this particular payment URL cannot 
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be used, a buyer network address, and a paynent URL 
authenticator that Is a digital signature based on a 
cryptographic key. The payment ORL authenticator is a 
hash of other inforaation in the payaent USL, the hash 
5 being defined by a key shared by the merchant and the 
operator of the payment computer. 

Zn an alternative embodiment, step 34 consists of 
the buyer computer sending a purchase product message to 
the merchant computer, and the merchant computer provides 

10 payment URL A to the buyer computer in response to the 
purchase product message. In this alternative 
embodiment, payment URL A contains the same contents as 
above. The buyer computer then sends the payment URL A 
it has received from the merchant coaiputer to the payment 

15 coB^uter. 

When the payment computer receives the payment URL 
it verifies whether the payment URL authenticator was 
created from the contents of the payment URL using the 
cryptographic key (step 36) . if not, the payment 

20 co]q>uter sends a document to the buyer computer 

indicating that access to the network sales system is 
denied (step 38). Otherwise, the payment computer 
determines whether the expiration time has past (step 
40). If it has, the payment computer sends a document to 

25 the buyer computer indicating that the time has expired 
(step 41) . Otherwise, the payment computer checks the 
buyer computer network address to see if it matches the 
one specified in the payment URL (step 42). If it does 
not match, the payment computer sends a document to the 

30 buyer computer indicating that access to the network 
payment system is denied (step 43). Otherwise, the 
payment computer sends a payment confirmation document to 
the buyer computer, the payment confirmation document 
including an "open" link and a "continue" link (step 44) . 
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An example of a conf irnation document is shown in 
Pig. 6. The confirmation document asks the user to click 
on a "contiime" button if the user already has an account 
with the payment computer , or to elide on an "open" 
S button if the user does not already have an account and 
wishes to open one. 

If the user diclcs on the "open" button (step 46) , 
the buyer computer sends payment URL C to the payment 
computer (step 48) , payment URL C being similar to 
10 payment URL A but also indicating that the user does not 
yet have an account. The payment computer creates a new 
account document (step 50) and sends it to the buyer 
computer (step 52) . An example of a new account document 
is shown in Pig. 7. when the user receives the new 
15 account document he enters the new accoxint name, an 

account password, a credit card number, the credit card 
expiration date, and security information such as the 
maiden name of the user's mother (step 54) , and presses a 
"submit" button (not shown in Pig. 7) . The buyer 
20 computer sends the new account information to the payment 
computer (step 56) , which enters the new account in the 
settlement database (step 58). 

If the user clicks on the "continue" button (step 
60) , the buyer computer sends payment URL B to the 
25 payment computer (step 62), payment URL B being similar 
to payment URL A but also indicating that the user 
already has an account. The payment computer then 
instructs the buyer computer to provide the account name 
and password (steps 64 and 66) , and the buyer computer 
30 proii5)ts the user for this information by creating an 
account name prompt (example shown in Pig. 8) and a 
similar password prompt. The user enters the information 
(step 68) and the buyer computer sends the account name 
and password to the payment computer (step 70) . 



wo 96/13013 



PCT/US95/13723 



- 12 - 

Vhe payment computer verifies whether the user 
nana and passvord are correct (step 72) • If they are not 
correct r the payaent coopttter sends a document to the 
buyer computer indicating that access to the netvork 
5 sales system is denied (step 74)* Otherwise, the payment 
computer determines whether additional security is 
warranted, based on, e.g., whether the payment amount 
exceeds a threshold (step 73). If additional security is 
warranted, the payment computer creates a challenge form 
10 document and sends it to the buyer computer (step 75) . 
Hhe user enters the security information (step 77) , the 
buyer computer sends the security information to the 
payment cooputer (step 79) , and the payment con^mter 
determines whether the security information is correct 

15 (step 81) • If it is not correct, the payment computer 
sends a document to the buyer computer indicating that 
access to the network sales system is denied (step 83) . 

If the security information is correct, or if 
additional security was not warranted, the payment 

20 computer checks the settlement database to determine 
whether the user has unexpired access to the domain 
identifier contained in the payment URL (step 82) . If 
'' so, the payment computer sends to the buyer computer a 
document providing an option either to repurchase or to 

25 use the previously purchased access (step 84} • An 

example of such a document is shown in Pig. 9. The user 
can respond to the recent purchase query document by 
choosing to access the previously purchased document 
(step 85) or to go ahead and buy the currently selected 

30 product (step 86) • 

If the user chooses to access the previously 
purchased document, the buyer coniputer skips to step 92 
(see below) • If the user chooses to buy the currently 
selected product, the payment computer calculates an 

35 actual payment amount that may differ from the payment 
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amount contained in the payment OIlL (step 87) . For 
exaaple, the purchase of a product in a certain domain 
nay entitle the user to access other products in the 
domain for free or for a reduced price for a given period 
5 of time. 

The payment computer then verifies whether the 
user account has sufficient funds or credit (step 76). 
If not, the payment computer sends a document to the 
buyer computer indicating that the user account has 

10 insufficient funds (step 78). otherwise, the payment 
computer creates an access URL (step 80) that includes a 
merchant computer identifier, a domain identifier, a 
product identifier, an indication of the end of the 
duration time for lAich access to the product is to be 

15 granted, the buyer network address, and an access URL 
authenticator that is a digital signature based on a 
cryptographic key. Bxe access VRL authenticator is a 
hash of other information in the access URL, the hash 
being defined by a key shared by the merchant and the 

20 operator of the payment computer. The payment computer 
then records the product identifier, the domain, the user 
account, the merchant account, the end of duration time, 
and the actual payment amount in the settlement database 
(step 88) . 

25 The payment coB^uter then sends a redirect to 

access URL to the buyer computer (step 90) , which sends 
the access URL to the merchant computer (step 92) . The 
aerchant computer verifies whether the access URL 
authenticator was created from the contents of the access 

30 URL using the cryptographic key (step 94) . If not, the 
merchant computer sends a document to the buyer computer 
indicating that access to the product is denied (step 
96). 

Otherwise, the merchant computer verifies whether 
35 the duration time for access to the product has expired 
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(Step 98). This is done because the buyer coaputer can 
request aenss to a purchased product repeatedly. If the 
duration tiae has aspired, the aerchant coapxiter sends a 
deeuunt to the buyer conpnter indicating that the tiae 
S has expired (step 100} . Otherwise the aerehant coaputer 
verifies that the buyer coaputer network address is the 
saae as the buyer network address in the access URL (step 
101} , and if so, sends a fulf illaant docuaent to the 
buyer coaputer (step 102} , which is displayed by the 
10 buyer ccaputer (step 104} . An exaaple of a fulfillaent 
docuaent is shown in Pig. lo. Otherwise, the aerehant 
coaputer sends a docuaent to the buyer coaputer 
indicating that access is not allowed (step 103} . 

With reference now to Fig. 3, when the aerehant 
15 coaputer sends the advertising docuaent to the buyer 

coB^rater, the user xwy request that a product be added to 
a shopping cart in the shopping cart database rather than 
request that the product be purchased ianediately. The 
buyer coaputer sends a shopping cart ORL to the payaent 
20 coiqmter (step 108}, the shopping cart ORL including a 
product identifier, a doaain identifier, a payaent 
aaount, a aerehant computer identifier, a aerehant 
account identifier, a duration tiae, an e3q)iration time, 
and a shopping cart DRL authenticator that is a digital 
25 signature based on a cryptographic key. The shopping 
cart URL authenticator is a hash of other inforaation in 
the shopping cart URL, the hash being defined by a key 
shared by the aerehant and the operator of the payaent 
conputer. 

30 The payaent coaq^ter verifies whether the shopping 

cart URL authenticator was created f roa the contents of 
the shopping cart URL tising a cryptographic key (step 
110) . If not, the payaent computer sends a docuaent to 
the buyer coi^ter indicating that access to the network 

35 sales systea is denied (step 112} . Otherwise, before any 
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aodification to a user's shopping cart is allowed, user 
authentication is performed (step 113) in a Banner 
analogous to steps 40-81. Once the user is 
authenticated, the payment computer creates or updates a 
5 payment UXO* for the shopping cart (step 114). 

The user then either requests more advertisements 
(step 24 in Fig. 2) and possibly adds another product to 
the shopping cart, requests display of the shopping cart 
(step 116) , or requests purchase of the entire contents 

10 of the shopping cart (step 124) . If the user requests 
display of the shopping cart (step 116), the buyer 
computer sends a fetch shopping cart request to the 
payment computer (step 118) , and the payment computer and 
buyer computer (step 119) perform steps analogous to 

15 steps 64-*81. The payment computer returns the contents 
of the shopping cart to the buyer computer (step 120) , 
trtiich displays the contents of the shopping cart (step 
122) . If the user requests that the entire contents of 
the shopping cart be purchased (step 124) the buyer 

20 computer causes the payment URL for the shopping cart to 
be activated (step 126) and the payment URL is processed 
in a manner analogoxis to the processing of payment URLs 
for individual products (beginning with step 36 in Fig. 
2). 

25 With reference now to Fig. 4, a user can request 

display of a "smart statement** that lists purchase 
transactions for a given month (step 128) • Khen the 
buyer computer receives such a request, it sends a smart 
statement URL to the payment computer (step 130) • 

30 When the payment counter receives the smart 

statement URL, it verifies %rhether the smart statement 
URL authenticator was created from the contents of the 
smart statement URL using a cryptographic )cey (step 132) . 
If not, the payment computer sends a document to the 

35 buyer computer indicating that access is denied (step 
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134}* Othervise, the payamt coaputer checks to 
determine vhether the buyer network address in the smart 
statement URL matches the buyer coavniter's actual network 
address (step 136) • If not, the payment coq^uter sends a 
5 document to the buyer computer indicating that access is 
denied (step 138) • Otherwise (step 140) , the payment 
coBVUter and buyer computer perform a set of steps 
analogous to steps 64-^81 in Pig. 2 (payment computer 
requests account name and password, user provides the 
10 requested information, and payment computer verifies the 
information) • 

In an alternative embodiment steps 132-138 are 
omitted* 

After verification of account information is 
15 complete, the payment coiqputer retrieves the requested 
settlement data from the settlement database, creates a 
smart statement document for the buyer, and sends the 
■mart statement document to the buyer computer (step 
142). An example of a smart statement document is shown 
20 in Fig. 11. Each purchase transaction record in the 
smart statement document includes the data of the 
transaction, the name of the merchant, an identification 
of the product, and the payment amount for the product. 
The smart statement document also includes a transaction 
25 detail DRL for each purchase transaction (these URLs, or 
hypertext links, are discussed below and are not shown in 
Fig. 11). The smart statement document also identifies 
previous statements that the user may wish to have 
displayed. 

30 buyer coaputer displays the retrieved document 

(step 144), and the user may request transaction details 
for a particular transaction listed on the smart 
statement (step 146). If so, the buyer co^niter sends a 
transaction detail URL (or "payment detail URL*") to the 

35 payment computer (step 148) . The transaction detail URL 
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includes a transaction identifier, a buyer network 
address, and a transaction detail URL authenticator. 
When the payment con«>uter receives the transaction detail 
URL, it performs (step 150) a set of steps analogous to 
5 steps 132-140 (verification of URL authenticator, buyer 
network address, and account information) . The payment 
computer then retrieves from the settlement database data 
corresponding to the payment transaction specified in the 
transaction detail URL, creates a transaction detail 

10 document, and sends it to the buyer computer (step 152) . 

An example of a transaction detail document is 
shown in Figs. 12 and 13* The document displays a number 
of items of information about the transaction, including 
the transaction date, end of the duration time 

15 ("expiration") , a description of the product, the payment 
amount, the domain corresponding to the product, an 
identification of the merchant, and the merchant's 
address. 

The smart statement document and the transaction 

20 detail document both include customer service URLs 

(hypertext links) that allow the user to request customer 
service (i.e., to send comments and suggestions to the 
payment computer) . When the user requests customer 
service (step 154), the buyer computer sends the customer 

25 service URL to the payment computer (step 156) , which 

creates a customer service form and sends it to the buyer 
computer (step 158). An example of a customer service 
form is shown in Fig. 14. The user types comments into 
the customer service form (step 160), and the buyer 

30 coa^uter sends the user's comments to the payment 

computer (step 162) • The payment coaq^uter then posts the 
user comments and sends a thank you document to the buyer 
computer (step 164)* 

A user may request display of a product included 

35 in the smart statement. When the user requests that the 
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product be displayftd (step 166} , th« buyer coaputer sends 
the access DRL contained in the saart stateaent docuaent 
to the aerchant cosq^ter (step 168) , and the buyer 
coaputer and aerchant coaqputer perf ora a set of steps 
5 analogous to steps 94-104 in Pig. 2 (authentication of 
access URL, verification whether duration tiae has 
expired, verification of buyer network address, and 
tranaaissien of f ulf illaent doeuaent to buyer coaputer) . 
Whenever the present application states that one 
10 computer sends a QRL to another coaputer, it should be 
understood that in preferred cabodiaents the DRL is sent 
in a standard HTTP request aessage, unless a DRL aessage 
is specified as a redirection in the present application. 
The request aessage includes coaponents of the DRL as 
15 described by the standard HTTP protocol definition. 
These DHL coaponents in the request aessage allow the 
server to provide a response appropriate to the DRL. The 
tera "DHL- as used the present application is an exaaple 
of a "link," which is a pointer to another doeuaent or 
20 fora (including aultinedia docuaents, hypertext docuaents 
including other links, or audio/ video docuaents) . 

When the present application states that one 
coaputer sends a doeuaent to another coB«)uter. it should 
be understood that in preferred eabodiaents the doeuaent 
25 is a success HTTP response aessage with the doeuaent in 
the body of the aessage. When the present application 
states that a server sends an account naae and password 
request aessage to the client, it should be understood 
that in preferred eabodiaents the account naae and 
30 password request aessage is an unauthorized HTTP 
response. A client coaputer sends account naae and 
password inf oraation to a server as part of a request 
aessage with an authorization field. 

The software architecture underlying the 
35 particular preferred eabodiaent is based upon the 



W096/1MI13 



PCrAJS95/13723 



- 19 - 

hypertext conventions of the World Hide Web. For 
example, the Hypertext Markup Language (HTML) docunent 
foraat Is used to represent digital advertisements. The 
HTML forms fill out support is used in Mosaic 2.0. The 
5 Hypertext Transfer Protocol (HTTP) is used between buyer 
and merchant cosqputers* Documents are named with Uniform 
Resource Locators (URLs) in the network of computers. 
URLs are authenticated using digital signatures. 

There has been described a new and useful network 
10 based sales system. It is apparent that those skilled in 
the art may make numerous modifications and departures 
from the specific embodiments described herein without 
departing from the spirit and scope of the claimed 
invention. 
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!• A natvork-baa«d salu systea, comprising; 
at laast one buyer computer for operation by a 
user desiring to buy a product; 
5 at least one nerchant eoaqputer; and 

at least one paysent cootputer; 

said buyer coaqputer, said merchant cooputer, and 
said payment coiqiuter being interconnected by a computer 
network; 

10 said buyer coatputer being programmed to receive a 

user request for purchasing a product, and to cause a 
payment message to be sent to said payment coaq^ter that 
coi^rises a product identifier identifying said product; 

said payment computer being programmed to receive 

15 said payment message, to cause an access message to be 
created that comprises said product identifier and an 
access message authenticator based on a cryptographic 
key, and to cause said access message to be sent to said 
merchant computer; and 

20 said merchant computer being programmed to receive 

said access message, to verify said access message 
authenticator to ensure that said access message 
authenticator was created using said cryptographic key, 
and to cause said product to be sent to said user 

25 desiring to buy said product. 

2. A network-based sales system in accordance 
with claim l, wherein said payment message and said 
access message each comprises a universal resource 
locator. 

30 3. A network*based sales system in accordance 

with claim l, wherein said payment computer is programmed 
to identify said merchant computer upon receipt of said 
payment message from said buyer computer. 
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4. A network-based sales system in accordance 
with claim 1, wherein said access message comprises a 
buyer network address. 

5. A network-based sales system in accordance 
5 with claim 4, wherein: 

said product cem be transmitted from one computer 
to another; and 

said merchant computer causes said product to be 
sent to said user by transmitting said product to said 
10 buyer network address only. 

6. A network-based sales system in accordance 
with claim 4, wherein said merchant cosiputer is 
programmed to verify Aether said buyer network address 
in said access message matches the actual network address 

15 of said buyer computer* 

7. A network-based sales system in accordance 
with claim 1, wherein said payment message comprises a 
buyer network address. 

8. A network-based sales system in accordance 

20 with claim 7, wherein said payment computer is programmed 
to verify whether said buyer network address in said 
payment message matches the actual network address of 
said buyer computer. 

9. A network-based sales system in accordance 
25 with claim 1, wherein said access message authenticator 

comprises a cryptographic function of contents of said 
access message based on said cryptographic key. 

10. A network-based sales system in accordance 
with claim 1, %rtierein said payment computer is programmed 
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to verify said payment xnessage aathenticator to ensxire 
that said payment message autbenticator was created using 
said cryptographic key. 

XI. A netvork-based sales system in accordance 
5 vith claim 10, vherein said payment message authenticator 
CGBoprises a cryptographic function of contents of said 
payment message based on said cryptographic key. 

12. A netvork*based sales system in accordance 
vith claim 1, i^erein said payment message comprises a 

10 payment amount* 

13. A netirork^based sales system in accordance 
vith claim 1, vherein said payment message coo^rises a 
merchant account identifier that identifies a merchant 
accoxant. 

15 14. A netvork-based sales system in accordance 

vith claim 1, vherein said buyer coiputer is programmed 
to transmit a user account identifier to said payment 
computer that identifies a user account. 

15. A netvork-based sales system in accordance 
20 vith claim 14, vherein: 

said paymen't meseage comprises a payment amount; 

and 

said payment computer is programmed to ensure that 
said user account has sufficient funds or credit to cover 
25 said payment amount. 

16. A network-based sales system in accordance 
vith claim 14, %^erein: 
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said payment message comprises a payment amoiint 
and a merchant account identifier that identifies a 
merchant account; and 

said payment computer is programmed to record said 
5 payment amount, said user account, and said merchant 
account in a settlement database. 

17. A network-based sales system in accordance 
with claim 16, wherein: 

said payment message comprises a domain 

10 identifier; and 

said payment computer is programmed to record said 
domain identifier and said user account in a settlement 
database. 

18. A network-based sales system in accordance 
15 with claim 17, wherein said payment computer is 

programmed to chetdc said settlement database, upon 
receipt of said payment message, to determine whether 
said user account has previously purchased a product 
associated with said domain identifier. 

20 19. A network-based sales system in accordance 

with claim 18, wherein said payment computer is 
programmed to determine an actual payment amount for said 
product identified by said product identifier in said 
payment message based on whether said user account has 

25 previously purchased a product associated with said 
domain identifier. 

20. A network-based sales system in accordance 
with claim l, wherein said buyer computer is programmed 
to transmit a user authenticator to said payment computer 
30 and said payment computer is programmed to verify said 
user authenticator. 
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21. A netvork-basftd sales system in accordance 
vltb claim 20, vherein said user authenticator comprises 
a password. 

22. A network-based sales system in accordance 
5 with claim 20, irtierein: 

said bayer computer is programmed to transmit 
security information to said payment coxaputer; 

said payment computer is programmed to transmit a 
challenge form to said buyer computer under a 
10 predetermined condition, said challenge form asking for 
said security information previously transmitted by said 
buyer computer to said payment computer; 

said payment co]q>uter is progreuamed to respond to 
said challenge form by querying said user for said 
15 security information and transmitting said security 
information to said payment con^uter; and 

said payment computer is programmed to verify 
authenticity of said security information. 

23. A network*based sales system in accordance 
20 with claim 22, wherein: 

said payment message comprises a payment amount; 

and 

said predetermined condition comprises receipt of 
a payment amount in said payment message that exceeds a 
25 threshold. 

24. A network-based sales system in accordance 
with claim 1, wherein said payment message comprises a 
merchant computer identifier that identifies said 
merchant computer. 
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25. A network-ba«ed sales systea In accordance 
with clain 24, irtierein said access message comprises said 
merchant computer identifier. 

26. A network-based sales system in accordance 
5 with claim 1, wherein said payment message coB^rises a 

duration time that specifies a length of time for which 
access to said product is to be granted. 

27. A network-based sales system in accordance 
with claim 26, wherein said payment computer is 

10 programmed to use said duration time to compute an end of 
duration time and to cause said end of dxiration time to 
be included in said access message. 

28. A network-based sales system in accordance 
with claim 27, wherein said merchant computer is 

15 programmed to verify, upon receipt of said access 

message, that said end of duration time has not past. 

29. A network-based sales system in accordance 
with claim 1, wherein said payment message comprises an 
expiration time after which said payment message can no 

20 longer be used. 

30. A network-based sales system in accordance 
with claim 29, wherein said payment computer is 
programmed to verify, upon receipt of said payment 
message, that said expiration time has not past. 

25 31. A network-based sales system in accordance 

with claim 1, wherein: 

said payment conqputer is programmed to cause said 
access message to be sent to said buyer computer; and 
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said buyer computer is prograased to causa said 
access nessage received from said payment computer to be 
sent to said merchant computer. 

32. A net%rar)c*based sales system, comprising: 
5 at least one buyer cooq^uter for operation by a 

user desiring to buy a product; 

at least one merchant computer; and 
at least one payment computer; 
said buyer computer, said merchant coiq;rater, and 
10 said payment computer being interconnected by a computer 
network; 

said buyer computer being programmed to receive a 
user request for purchasing a product, and to cause a 
payment URI» to be sent to said payment computer that 

15 comprises a product identifier identifying said product, 
a payment amount, and a payment URL authenticator 
comprising a cryptographic function of contents of said 
payment URL based on a cryptographic key; 

said payment computer being programmed to receive 

20 said payment URL, to verify said payment URL 
authenticator to ensure that said payment URL 
authenticator was created using said cryptographic key, 
to ensure that said user has sufficient funds or credit 
to cover said payment amount, to identify said merchant 

25 computer operated by said merchant willing to sell said 
product to said buyer, to cause an access URL to be 
created that comprises said product identifier and an 
access URL authenticator comprising a cryptographic 
function of contents of said access URL based on a 

30 cryptographic key, and to cause said access URL to be 
sent to said buyer computer; 

said buyer coniputer being progreuamed to cause said 
access URL received from said payment computer to be sent 
to said merchant computer; and 
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said aerchant conputer being programad to receive 
said access XJRL, to verify said access URL authenticator 
to ensure that said access URL authenticator was created 
using said cryptographic key. and to cause said product 
5 to be sent to said user desiring to buy said product. 

33. A method of operating a payment conputer in a 
computer networJc comprising at least one buyer computer 
for operation by a user desiring to buy a product, at 
least one merchant computer, and at least one payment 
10 computer, the method conprising the steps of: 

receiving, at said payment coB«»uter, a payment 
aessage that said buyer computer has caused to be sent to 
said payment conputer in response to a user request for 
purchasing a product, said payment message coarprising a 
15 product identifier identifying said product; 

causing an access message to be created that 
comprises said product identifier and an access message 
authenticator based on a cryptographic key; and 

causing said access message to be sent to said 
20 merchant computer, said merchant computer being 

programmed to receive said access message, to verify said 
access message authenticator to ensure that said access 
nessage authenticator was created using said 
cryptographic key, and to cause said product to be sent 
25 to said user desiring to buy said product. 

34. A network-based sales system, comprising: 

at least one buyer computer for operation by a 
user desiring to buy products; 

at least one shopping cart computer; and 
30 a shopping cart database connected to said 

shopping cart computer; 

said buyer computer and said shopping cart 
computer being interconnected by a coa^mter network; 
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said buyer computer being programed to receive a 
plurality of requests froa a user to add a plurality of 
respective products to a shopping cart in said shopping 
cart database, and, in response to said requests to add 
5 said products, to send a plurality of respective shopping 
cart aessages to said shopping cart computer each of 
which coxaprises a product identifier identifying one of 
said plurality of products; 

said shopping cart conputer being programned to 

10 receive said plurality of shoppixig cart aessages, to 

modify said shopping cart in said shopping cart database 
to reflect said plurality of requests to add said 
plurality of products to said shopping cart, and to cause 
a payaent message associated vith said shopping cart to 

15 be created; and 

said buyer computer being prograaaed to receive a 
request from said user to purchase said plurality of 
products added to said shopping cart and to cause said 
payaent aessage to be activated to initiate a payment 

20 transaction for said plurality of products added to said 
shopping cart. 

35* A network-based sales systea in accordance 
with claim 34, wherein said shopping cart computer is 
programmed to cause said payment message to be created 
25 before said buyer computer causes said payment message to 
be activated. 

36. A network-based sales system in accordance 
with claim 34, irtierein said buyer computer is programmed 
to receive a request from said user to display said 

30 plurality of products added to said shopping cart. 

37. A network-based sales system in accordance 
with claim 36, wherein said buyer computer is programmed 
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to transBit a fetch shopping cart request to said payBant 
conpnter in response to receipt of said request fron said 
user. 

38. A network-based sales systea in accordance 

5 with claiii 37, wherein: 

said paynent coaqputer is prograaaed to respond to 
said fetch shopping cart request by transnitting a 
message to said buyer computer indicating said plurality 
of products added to said shopping cart? and 
10 said buyer conputer is prograaaed to display said 

plurality of products added to said shopping cart. 

39. A aethod of operating a shopping cart 
coaputer in a coaputer networlc coaprising at least one 
buyer coaputer for operation by a user desiring to buy 

15 products, at least one shopping cart coaputer, and a 
shopping cart database connected to said shopping cart 
coaputer, said aethod coaprising the steps of: 

receiving, at said shopping cart coaputer, a 
plurality of shopping cart aessages sent to said shopping 
20 cart coaputer by said buyer coaputer in response to 

receipt of a plurality of requests froa a user to add a 
plurality of respective products to a shopping cart in 
said shopping cart database, each of said shopping cart 
aessages coaprising a product identifier identifying one 
25 of said plurality of products; 

aodif ying said shopping cart in said shopping cart 
database to reflect said plurality of requests to add 
said plurality of products to said shopping cart; and 
causing a payaent aessage associated with said 
30 Shopping cart to be created; 

said buyer coaputer being prograaaed to receive a 
request froa said user to purchase said plurality of 
products added to said shopping cart and to cause said 
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payment nessage to be activated to initiate a pay&ent 
transaction for said plurality of products added to said 
shopping cart. 

40. A network-based link nessage systen, 
5 coB^ising: 

least one client conputer for operation by a 
client user; and 

at least one server computer for operation by a 
server user; 

10 Mid client coaster and said server computer 

being interconnected by a conputer network; 

said client coaqputer being programmed to send an 
initial link message to said server coaiputer; 

said server computer being programmed to receive 

15 said initial link message from said client computer, to 
create, based on information contained in said initial 
link message, a session link message that encodes a state 
of interaction between said client computer and said 
server con^juterr said session link message comprising a 

20 session link authenticator, computed by a cryptographic 
function of said session link contents, for 
authenticating said session link message, and to cause 
said session link message to be sent to said client 
computer; 

2^ said client computer being programmed to cause 

said session link message to be sent to a computer in 
said network that is programmed to authenticate said 
session link message by examining said session link 
authenticator and that is programmed to respond to said 

30 session link message based on said state of said 

interaction between said client coo^uter and said server 
computer. 
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41. A network-based link message systea in 
accordance with claim 40, wherein: 

said client computer comprises a buyer computer 
for operation by a user desiring to buy a product; 
5 said server computer comprises a payment computer 

for operation by a manager of said network-based link 

message system; and 

said network-based link message system further 
comprises a merchant computer for operation by a merchant 
10 willing to sell said product to said buyer. 

42. A network-based link message system in 
accordance with claim 41, wherein said computer that is 
programmed to authenticate said session link message 
coB^rises said merchant computer. 

15 43. A network-based link message system in 

accordance with claim 41, wherein said initial link 
nessage comprises a payment laessage to said payment 
computer that comprises a product identifier identifying 
said product. 



20 



44. A network-based link message system in 
accordance with claim 43, wherein said session link 
message comprises an access message that comprises said 
product identifier to be created. 

45. A network-based link message system in 

25 accordance with claim 44, wherein said merchant computer 
is programmed to respond to said access message by 
causing said product to be sent to said user desiring to 
buy said product. 

46. A network-based link message system in 
30 accordance with claim 40, wherein said initial link 
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aeasage and said session link ssssage coaprise univarsal 
resource locators. 

47. X netvork-based link aessage system in 
accordance with clain 40, wherein: 

5 said session link authenticator comprises a 

cryptographic function of contents of said session link 
message based on a cryptographic key; and 

said cofi^uter to which said client computer is 
programmed to cause said session link message to be sent 
10 is progrananed to verify that said session link 

authenticator was created using said cryptographic key. 

48. A method of operating a server computer in a 
network-based link message system coaiprising at least one 
client coaster for operation by a client user and at 

15 least one server computer for operation by a server user, 
said client computer and said server computer being 
interconnected by a computer network, said method 
coB^rising the steps of: 

receiving, at said server computer, an initial 

20 link message sent to said server computer by said client 
computer; 

creating, based on information contained in said 
initial link message, a session link message that encodes 
a state of interaction between said client computer and 
25 said server computer, said session link message 

comprising a session link authenticator, computed by a 
cryptographic function of said session link contents, for 
authenticating said session link message; and 

causing said session link message to be sent to 
30 said client computer; 

said client raoputer being programmed to cause 
said session link message to be sent to a computer in 
said network that is programmed to authenticate said 
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session link message by examining said session link 
authenticator and that is programmed to respond to said 
session link message based on said state of said 
interaction between said client computer and said server 
5 computer. 

49. A network-based sales system, comprising: 
a merchant database comprising a plurality of 

digital advertisements and a plurality of respective 

product fulfillment items; 
10 at least one creation coiQ>uter for creating said 

merchant database; and 

at least one merchant computer for causing said 

digital advertisements to be transmitted to a user and 

for causing advertised products to be transmitted to said 
15 user; 

said creation computer and said merchant computer 
being interconnected by a computer network; 

said creation cos^uter being programmed to create 
said merchant database, and to transmit said digital 
20 advertisements and said product fulfillment items to said 

merchant computer; 

said merchant computer being programmed to receive 
said digital advertisements and product fulfillment 
items, to receive a request for a digital advertisement 
25 from a user, to cause said digital advertisement to be 
sent to said user, to receive from said user an access 
message identifying an advertised product, and to cause 
said product to be sent to said user in accordance with a 
product fulfillment item corresponding to said product. 

30 50. A network-based sales system in accordance 

with claim 49, wherein each of said digital 
advertisements comprises an abstract of a product and a 
price. 
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51. A neteork«*ba8ed sales system in accordance 
with clain 50, wherein: 

at least one of said product fulfillment iteas 
comprises a product itself; and 
5 said creation coxsputer is programmed to transmit 

said product to said mer^ant computer with said digital 
advertisements • 

52. A netvorX-*based sales system in accordance 
vith claim 50, wherein: 

10 at least one of said product fulfillment items 

cooiprises a hard good identifier; and 

said creation computer is programmed to transmit 
said hard good identifier to said merchant coaster with 
said digital advertisements. 

15 53. A method of operating a merchant computer in 

a network-based sales system conprising a merchant 
database that comprises a plurality of digital 
advertisements and a plurality of respective product 
fulfillment items, at least one creation computer for 

20 creating said merchant database, and at least one 

merchant computer for causing said digital advertisements 
to be transmitted to a user and for causing advertised 
products to be transmitted to said user, said creation 
coBq>uter and said merchant coiaputer being interconnected 

25 by a computer network, said method conprising the steps 
of: 

receiving, at said merchant computer, said digital 
advertisements and said product fulfillment items ^ said 
digital advertisements and said product fulfillment items 
30 having been transmitted to said merchant computer by said 
creation computer, said merchant database comprising said 
digital advertisements and said product fulfillment items 
having been created by said creation computer; 
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receiving a request for a digital advertisement 
from a user; 

causing said digital advertisement to be sent to 
said user; 

5 receiving from said user an access message 

identifying an advertised product; and 

causing said product to be sent to said user in 
accordance vlth a product fulfillment item corresponding 
to said product. 

10 54. A hypertext statement system, comprising: 

a client computer for operation by a client user; 

and 

one or more server coorputers for operation by a 
server user; 

15 said client computer and said server coxsputers 

being interconnected by a computer network; 

at least one of said server computers being 
programmed to record purchase transaction records in a 
database, each of said piirchase transaction records 

20 comprising a product description, and to transmit a 

statement document comprising said purchase transaction 
records to said client computer; 

said client computer being programmed to display 
said product descriptions, to receive a request from said 

25 client user to display a product corresponding to a 
product description displayed by said client computer, 
and to cause a product hypertext link derived from a 
purchase transaction record to be activated; 

at least one of said server computers being 

30 programmed to respond to activation of said product 

hypertext link by causing said product to be sent to said 
client cos^uter. 
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55. A hyperteact statament systm in accordance 
vlth claim 54, wherein: 

■aid client conputer is progranmed to receive a 
request f roa said client user to display trusaction 
5 details corresponding to a product description displayed 
by said client computer and to cause a transaction detail 
hypertext link corresponding to said product description 
to be activated; and 

said server coaputer is prograaiBed to respond to 
10 activation of said transaction detail hypertext link by 
transmitting said transaction details to said client 
computer as a transaction detail document. 

56. A hypertext statement system in accordance 
with claim 55, wherein: 

15 said transaction detail document further comprises 

a customer service form hypertext link; 

said client computer is programmed to receive a 
request from said client user to display a customer 
service form and to cause said customer service form 

20 hypertext link to be activated; and 

said server computer is programmed to respond to 
activation of said customer service form hypertext link 
by transmitting said customer service form to said client 
coaputer. 

25 57. A hypertext statement system in accordance 

with claim 54, i^erein: 

said statement docvuaent further comprises a 
customer service form hypertext link; 

said client computer is progranmed to receive a 
30 request from said client user to display a customer 
service form and to cause said customer service form 
hypertext link to be activated; and 
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said server conputer is programBied to respond to 
activation of said custoBer service f ona hypertext link 
by transnitting said customer service form to said client 
cooputer. 

5 58. A method of operating a server coanputer in a 

hypertext statement system comprising a client computer 
for operation by a client user, and one or more server 
computers for operation by a server user, said client 
computer and said server computers being interconnected 
10 by a computer network, said method comprising the steps 
of: 

recording, at one of said server computers, 
purchase transaction records in a database, each of said 
purchase transaction records comprising a product 

15 description; and 

transmitting a statement document comprising said 
purchase transaction records to said client computer; 

said client computer being programmed to display 
said product descriptions, to receive a request from said 
20 client user to display a product corresponding to a 
product description displayed by said client computer, 
and to cause a product hypertext link derived from a 
purchase transaction record to be activated; 

at least one of said server computers being 
25 programmed to respond to activation of said product 

hypertext link by causing said product to be sent to said 
client computer. 

59. A net%rork payment system, comprising: 
at least one buyer computer for operation by a 
30 user desiring to buy a product; and 

at least one payment computer for processing 
payment messages from said buyer computer; 
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said buy«r computer and said payment coaster 
being interconnected toy a computer netvork; 

said buyer computer being programmed to cause a 
payment message to be sent to said payment computer, said 
5 payment Mssage comprising a product identifier 

identifying said product that said user desires to buy; 

said payment computer being programmed to receive 
said payment message, to cause an access message to be 
created to enable said user to access said product, and 
10 to record a purchase transaction record in said 
settlement database; 

said buyer computer being programmed to cause a 
request for purchase transaction records to be sent to 
said payment computer; and 
15 said payment computer being programmed to receive 

said request for purchase transaction records and to 
cause a document derived from said purchase transaction 
records to be sent to said buyer computer. 

60* A method of operating a payment computer in a 
20 netvork payment system comprising at least one buyer 
computer for operation by a user desiring to buy a 
product, and at least one payment computer for processing 
payment messages from said buyer computer, said method 
comprising the steps of: 
25 receiving, at said payment computer, a payment 

message that said buyer coi^mter has caused to be sent to 
said payment computer, said payment message comprising a 
product identifier identifying said product that said 
user desires to boy; 
30 causing an access message to be created to enable 

said user to access said product; 

recording a purchase transaction record in said 
settlement database; 
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receiving a request for purchase transaction 
records that said buyer computer has caused to be sent 
said pay»ent coaster; and 

causing a docunent derived from said purchase 
transaction records to be sent to said buyer computer. 
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